The old Push-to-Attic step SSH-copied the full closure (~794MB gateway) to the VPS on every new store path before attic push — at ~500KB/s that took 25+ minutes (observed 40min+ in-flight run). The runner can now push straight to the public attic endpoint (https://attic.asepharyana.my.id, token auth validated) after pulling the prebuilt attic client closure (52MB) from the VPS via nix copy --from. Falls back to the VPS-hop flow whenever the direct path fails.